Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2738▲ 10 respecto a la semana anterior

Críticas / altas1458▲ 322 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)85▼ 441 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-2443	Modificada	Media (5)	3.2%	—	Siteframe CMS	13/7/2009	16/6/2026	Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
CVE-2008-3256	Modificada	Alta (7.5)	2.0%	—	Siteframe Beaumont Siteframe CMS	22/7/2008	16/6/2026	SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-0783	Modificada	Media (4.3)	1.9%	—	Siteframe Beaumont	19/2/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the comment_text parameter to the user comment page (/edit/Comment).
CVE-2006-0675	Modificada	Media (4.3)	2.0%	—	Glen Campbell Siteframe	13/2/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVE-2005-4824	Modificada	Alta (7.5)	1.2%	—	Glen Campbell Siteframe	31/12/2005	16/6/2026	PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerability than CVE-2005-1965.
CVE-2005-1965	Modificada	Alta (7.5)	4.0%	—	Glen Campbell Siteframe	16/6/2005	16/6/2026	PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter.